fix: add event message resources to ModSecurityIIS.dll and resolve "Invalid function" errors (#3408)

[A13501350]

what

• Added ModSecurityIISMessage.mc event message resource file
• Updated Makefile.win to:
  • Compile ModSecurityIISMessage.mc to .res resource file
  • Link generated resource into existing ModSecurityIIS.dll
• Modified installer.wxs to register event source pointing to ModSecurityIIS.dll

why

• Fixes "Invalid function" errors in Windows Application Event Log (Event message with description "Invalid function" in the Windows Application Event Log #3408)
• Ensures proper event descriptions appear for IIS module events
• Embeds message resources directly in ModSecurityIIS.dll

example results

After the fix, event logs now display properly formatted messages:

PS C:\Users\Hyper-V> get-eventLog -LogName Application -Source ModSecurity -Newest 8

   Index Time          EntryType   Source                 InstanceID Message
   ----- ----          ---------   ------                 ---------- -------
     561 Aug 28 23:10  Information ModSecurity                     1 ModSecurity: StatusEngine call failed. Query: G...
     560 Aug 28 23:10  Information ModSecurity                     1 ModSecurity: StatusEngine call: "2.9.12,IIS,1.7...
     559 Aug 28 23:10  Information ModSecurity                     1 ModSecurity: LIBXML compiled version="2.9.14"
     558 Aug 28 23:10  Information ModSecurity                     1 ModSecurity: YAJL compiled version="2.1.0"
     557 Aug 28 23:10  Information ModSecurity                     1 ModSecurity: LUA compiled version="Lua 5.4"
     556 Aug 28 23:10  Information ModSecurity                     1 ModSecurity: PCRE compiled version="8.45 "; loa...
     555 Aug 28 23:10  Information ModSecurity                     1 ModSecurity: APR compiled version="1.7.6"; load...
     554 Aug 28 23:10  Information ModSecurity                     1 ModSecurity for IIS (STABLE)/2.9.12 (http://www...

references

• Event message with description "Invalid function" in the Windows Application Event Log #3408
• Based on Windows Event Log requirements for message resources:
  • https://learn.microsoft.com/en-us/windows/win32/eventlog/reporting-an-event
  • https://learn.microsoft.com/en-us/windows/win32/eventlog/message-text-files
  • https://learn.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-reporteventa

[airween]

Hi @A13501350,

many thanks for this excellent PR - great description! I added only one note, see above.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[airween]

Thanks @A13501350!